Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32312d3231203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32312d3231203d3e20323632383636.roa (raw, json)
Hash identifier:          spzVfLXD5+bTEIYBPHj5csud+eR4TI20ZTmJzAat6UA=
Subject key identifier:   42:34:66:33:9E:E5:C2:7A:AD:D7:E4:D7:80:ED:6D:41:68:49:A8:87
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       0C9C7514F4642FF3FF6FDBE48AFE53C922DFB684
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32312d3231203d3e20323632383636.roa
Signing time:             Mon 22 Jan 2024 12:15:16 +0000
ROA not before:           Mon 22 Jan 2024 12:10:16 +0000
ROA not after:            Mon 20 Jan 2025 12:15:16 +0000
asID:                     262866
IP address blocks:        177.12.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9c:75:14:f4:64:2f:f3:ff:6f:db:e4:8a:fe:53:c9:22:df:b6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 22 12:10:16 2024 GMT
            Not After : Jan 20 12:15:16 2025 GMT
        Subject: CN=423466339EE5C27AADD7E4D780ED6D416849A887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:9d:ad:5c:1d:8c:a8:e9:03:40:5b:e9:2e:
                    f6:42:69:ef:c5:f3:e8:74:60:ac:37:e1:f2:f1:58:
                    48:b6:15:27:33:f0:9c:39:be:15:f8:80:78:bf:a7:
                    1b:06:7e:89:6a:e2:dc:a0:de:25:49:e5:0f:5c:46:
                    76:86:4a:5d:f3:72:89:30:3f:aa:7a:93:2c:71:19:
                    95:b6:1b:7b:ee:5e:3a:36:ca:c2:7c:c1:2c:9d:00:
                    db:7d:0c:44:4e:e6:7f:09:4b:25:d9:2b:8d:1d:0d:
                    91:9f:d7:72:3f:c4:22:c8:c3:5e:ed:05:46:d1:8e:
                    19:eb:51:79:5a:ff:92:b1:66:7b:68:ef:b2:8f:0a:
                    f1:9c:b4:ba:ee:1c:4e:48:5a:2b:3c:4f:76:74:5d:
                    ef:02:f2:e5:03:26:b2:d1:0f:ee:97:64:ba:36:e8:
                    50:35:05:18:89:da:03:a8:06:02:94:04:c4:14:94:
                    24:32:69:18:89:de:bf:a2:d2:ad:9b:be:26:c6:82:
                    90:8b:dc:22:0c:03:e9:7d:19:8b:27:5e:17:aa:60:
                    80:0b:5f:64:e4:c1:e0:9a:9c:6c:30:24:7a:d9:34:
                    23:a2:0a:cf:9e:f3:0d:bc:11:42:54:c8:d8:45:04:
                    cc:9c:85:34:56:47:2f:17:ff:ee:88:27:db:2d:b1:
                    eb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:34:66:33:9E:E5:C2:7A:AD:D7:E4:D7:80:ED:6D:41:68:49:A8:87
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32312d3231203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:b3:ae:bd:9f:cc:c0:d5:b0:f6:f8:79:f2:d3:de:ee:98:
         e8:be:1d:77:66:5f:72:ee:b5:2a:7b:1f:e1:af:a8:6e:cf:1b:
         b9:8a:14:e0:f9:cb:7e:9c:1f:f2:66:74:df:f1:37:ac:e0:8e:
         f9:f1:2c:ac:52:60:c1:8b:26:0c:d9:a8:8b:18:17:c2:34:99:
         e4:aa:9e:9a:4d:03:75:75:4c:ec:49:64:e8:36:23:30:ce:c9:
         fc:d4:64:b0:18:3c:bd:8a:0e:68:81:73:99:bb:c4:61:8e:2b:
         1e:5d:c4:34:92:38:ed:17:33:d7:9a:e0:35:d5:99:e0:66:ae:
         9a:c9:64:74:4e:18:7d:74:5a:d0:18:f9:a2:a9:83:56:de:c0:
         dd:18:60:f3:e6:fa:b4:26:6b:fc:b6:fb:68:31:d5:a5:2f:1c:
         fd:f4:78:cb:87:17:c0:86:c9:c1:18:a5:ce:99:45:42:3b:6d:
         52:43:ce:fb:7c:e4:aa:a1:52:aa:6c:5d:7b:e3:7b:c6:84:88:
         be:70:50:05:4a:7c:1b:af:99:c1:64:8a:1e:c9:85:fc:0c:5a:
         95:31:b7:24:f2:ab:84:12:13:ab:7a:96:d4:56:04:0a:d9:b1:
         fd:fa:b0:e9:69:8b:78:75:8a:86:0b:d7:37:85:e6:ba:64:8e:
         d7:9e:d4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org